1.      encrypt /home:
		sudo apt install ecryptfs-utils cryptsetup
		sudo ecryptfs-migrate-home -u <имя_пользователя>
		no reboot
		ecryptfs-unwrap-passphrase
		sudo rm -rfv /home/имя_пользователя.random

2. 	sudo nano /etc/udev/rules.d/90-hide_part.rules
                a) KERNEL=="sdXX", ENV{UDISKS_IGNORE}="1"
                b) sudo udevadm control --reload
                c) reboot PC
	
3. 	Freshclam
		a) ps -ax | grep freshclam
		b) sudo kill ..... (/usr/bin/freshclam -d --foreground=true)
		
4. 	sudo chown -R ...  /mnt/....
		fstab: /dev/sda1  /mnt/...  ext4  defaults 1 2

5. 	swapfile
		sudo fallocate -l 4.1g /mnt/1.swap
		sudo chmod 600 /home/1.swap
		sudo mkswap /mnt/1.swap
		sudo swapon /mnt/1.swap
		echo '/mnt/1.swap swap swap defaults 0 0' | sudo tee -a /etc/fstab
		free -h
	
6. 	Флэка в вирт. машине: sudo usermod -aG vboxusers $USER

7. 	usbguard:

		a) sudo usbguard generate-policy > rules.conf
		b) sudo nano rules.conf
		c) sudo install -m 0600 -o root -g root rules.conf /etc/usbguard/rules.conf
		d) sudo systemctl restart usbguard
		e) lsusb
		f) sudo nano /etc/usbguard/rules.conf
		j) sudo systemctl restart usbguard
	
8. 	Systemback:
		sudo thunar /usr/share/systemback/lang
		
9. 	conky: (/etc/conky/conky.conf)
        sudo dpkg-reconfigure hddtemp - перезапуск сервера для отображения температуры
	
10.	sudo rkhunter --propupd
	sudo rkhunter --update
    sudo rkhunter -c -sk
			    
11. Usbdeath
            git clone https://github.com/trpt/usbdeath.git
            cd usbdeath
            chmod 777 usbdeath
            ./usbdeath show
            ./usbdeath on